From: jin-gyu.kim <jin-gyu.kim@samsung.com>
Date: Wed, 20 Nov 2019 06:23:16 +0000 (+0900)
Subject: Give capabilities to stability-monitor
X-Git-Tag: submit/tizen/20191121.124127~4
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=refs%2Fchanges%2F78%2F218178%2F1;p=platform%2Fcore%2Fsecurity%2Fsecurity-config.git

Give capabilities to stability-monitor

cap_sys_ptrace        To attach in process and readlink for working
cap_sys_module        To load/unload kernel module
cap_kill              To kill processes

Change-Id: Iac3d91ed4ee647609b029c5ecae4171e8282770f
---

diff --git a/config/set_capability b/config/set_capability
index 5907e40..78a1e28 100755
--- a/config/set_capability
+++ b/config/set_capability
@@ -666,6 +666,17 @@ if [ -e "/usr/bin/hciconfig" ]
 then /usr/sbin/setcap cap_net_admin=ei /usr/bin/hciconfig
 fi
 
+# Package               platform/core/system/stability-monitor
+# Date                  Nov 20, 2019
+# Required              cap_sys_ptrace,cap_sys_module,cap_kill
+# cap_sys_ptrace	To attach in process and readlink for working
+# cap_sys_module	To load/unload kernel module
+# cap_kill		To kill processes
+
+if [ -e "/usr/sbin/stability-monitor" ]
+then /usr/sbin/setcap cap_sys_ptrace,cap_sys_module,cap_kill=ei /usr/sbin/stability-monitor
+fi
+
 # Package               platform/core/connectivity/ua-manager
 # Date                  Jun 13, 2019
 # Required              cap_net_raw,cap_sys_rawio